In Helm v2, we had the ability to set an environmental variable to pass in the passphrase to the GPG private key using $HELM_KEY_PASSPHRASE. (Added in pull 4778)

In Helm v3, that feature does not appear to exist. The only passphraseFetcher implemented is in helm/pkg/action/package.go on line 136.

Without this option, we can't make use of helm package --sign from CI/CD tools (like Azure DevOps, which I'm currently using), because the terminal.ReadPassword does not take place in a TTY, which results in an error inappropriate ioctl for device.

I'm open to other options as well.